0:06:15 Resources and Links (openvpn server, openvpn client, filezilla)
0:08:30 Openvpn Server installation
0:12:15 Download client file using filezilla
0:13:30 Copy client file to OpenVPN folder
0:14:00 OpenVPN launch and connect
0:15:45 Update OpenVPN server to allow for split tunneling (split-tunneling) and test
OpenVPN Client Connection
There might be times when you will work with system where you need to connect using an OpenVPN client. If you are using a local Linux system, you can use the following commands:
sudo apt update
sudo apt install openvpn
sudo openvpn --config YourCertHere.ovpn
Note: you can use tmux to hold the session will you are using a different terminal
Wireguard VPN
Wireguard is a new and improved high-speed VPN option. It is faster, small and more efficient than openVPN. It has great Linux, windows, android and ios clients. Below are resources to help you get started with Wireguard.
Audio discussion of getting started with Wireguard:
Video Transcript:
sudo ufw allow from 19.85.226.34 to any port 5432 comment 'only allow app server to connect directly to the database'
# shows how to add a comment to the rule for future reference
ufw show added
# shows rules even when not active
# alternative way to see rules when UFW inactive:
sudo cat /etc/ufw/user.rules
ufw enable
Managing connections when you have sudo abilities
sudo apt udpate
sudo apt install -y wireguard
Download your wireguard config from your admin
Rename your config file appropriately (name-config.conf)
Note you could have more than one config from more than one network. Naming is important in this case.
Be aware there is a config name length limit. The below start command will fail with a "file not found" error if the name is too long. TODO: add length here...